Principal Engineer, Product Security

Welcome to Warner Bros. Discovery… the stuff dreams are made of.

Who We Are…

When we say, “the stuff dreams are made of,” we’re not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBD’s vast portfolio of iconic content and beloved brands, are the storytellers bringing our characters to life, the creators bringing them to your living rooms and the dreamers creating what’s next…

From brilliant creatives, to technology trailblazers, across the globe, WBD offers career defining opportunities, thoughtfully curated benefits, and the tools to explore and grow into your best selves. Here you are supported, here you are celebrated, here you can thrive.

*Must be able to work a hybrid model (3 days onsite) out of our Burbank office.*

Job Responsibilities: 

• Drive the expansion of Product Security programs, focusing on areas such as security architecture engagement strategies, scalable product threat modeling, and the implementation of a security technical champion’s program. 

• Develop and deliver strategic security roadmap plans, ensuring successful and timely completion of initiatives with high quality. 

• Establish and enforce security standards, policies, and best practices for our product development teams, ensuring compliance with industry regulations and customer expectations (GDPR, CCPA, etc.) 

• Partner with product, engineering, and business stakeholders to identify and prioritize security risks and requirements, and provide guidance and support on security architecture, design, testing, and remediation. 

• Develop and implement security metrics and dashboards to measure and report on the security posture and performance of our products and platforms. 

• Stay abreast of emerging security threats, trends, and technologies, and provide thought leadership and innovation on security solutions and practices. 

• Lead the adoption and integration of DevSecOps principles and practices into the product development process, such as continuous integration, continuous delivery, automation, and collaboration. Familiarity with common vulnerabilities and attack vectors in consumer-facing digital services and leverage cloud security best practices and tools to secure our products and platforms on AWS, GCP, and Azure, using automation and CI/CD pipelines. 

• Manage relationships effectively, advocating for business and external customers by engaging in security-related requirements conversations. 

QUALIFICIATIONS  

Qualifications & Experiences: 

• Hybrid work environment; must be based in the Warner Bros. Discovery office for a minimum of three (3) days/week. 

• Bachelor’s degree in computer science, Engineering, or related field, or equivalent work experience. 

• 7+ years of experience in information security, with at least 4 years of experience in product security, application security, or cloud security. 

• Understanding of consumer behavior and expectations regarding digital services and experience balancing security needs with user experience considerations 

• Proven track record of leading and managing security teams and projects in a fast-paced, dynamic, and agile environment  

• Extensive experience in secure code reviews, business logic assessments and application security testing with deep understanding of network, data, and cloud security principles 

• Expert knowledge of security principles, standards, and best practices, such as OWASP, NIST, ISO, etc. 

• Experience in deploying cyber security solutions in public cloud environments (IaaS, PaaS, SaaS)